exclude password fields from being filtered/escaped by AntiXSS, fixes #1150
Signed-off-by: Michael Kaufmann <d00p@froxlor.org>
This commit is contained in:
@@ -449,7 +449,15 @@ class PhpHelper
|
|||||||
'ssl_specialsettings',
|
'ssl_specialsettings',
|
||||||
'default_vhostconf_domain',
|
'default_vhostconf_domain',
|
||||||
'ssl_default_vhostconf_domain',
|
'ssl_default_vhostconf_domain',
|
||||||
'filecontent'
|
'filecontent',
|
||||||
|
'admin_password',
|
||||||
|
'password',
|
||||||
|
'new_customer_password',
|
||||||
|
'privileged_password',
|
||||||
|
'email_password',
|
||||||
|
'directory_password',
|
||||||
|
'ftp_password',
|
||||||
|
'mysql_password',
|
||||||
];
|
];
|
||||||
if (!empty($global)) {
|
if (!empty($global)) {
|
||||||
$tmp = $global;
|
$tmp = $global;
|
||||||
|
|||||||
Reference in New Issue
Block a user